收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1400多个poc/exp，长期更新。
☆68Jan 7, 2025Updated last year
Alternatives and similar repositories for POC
Users that are interested in POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- 三色哥斯拉（Godzilla）☆66Dec 27, 2024Updated last year
- 备份的漏洞库，3月开始我们来维护☆2,230Jul 13, 2026Updated 2 months ago
- 武器库、渗透测试、红蓝对抗、黑客攻防、目录扫描器、phpmyadmin爆破写一句话☆12Feb 20, 2021Updated 5 years ago
- Satori botnet variant☆14Mar 19, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- APT-GUID☆23Oct 23, 2020Updated 5 years ago
- A simple chrome-extension for website fingerprint extraction☆18May 28, 2025Updated last year
- 自动生成nuclei 2025HW poc☆127Jul 25, 2025Updated last year
- There is my vuln POC and EXP. Some of POC were collected, most of POC and EXP were written by myself.☆13May 28, 2022Updated 4 years ago
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆54Oct 30, 2025Updated 11 months ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated last year
- GitHubApi CVE Poc监控工具☆13Jan 23, 2026Updated 8 months ago
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆27Oct 29, 2024Updated last year
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆766Jul 20, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Windows满足等保的基线核查脚本☆21Oct 9, 2023Updated 3 years ago
- Java Vulnerability Exploitation Platform☆2,172Aug 22, 2026Updated last month
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,603Oct 1, 2026Updated last week
- 记录一些代码审计过的源码☆181Feb 26, 2025Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,076Dec 2, 2025Updated 10 months ago
- ☆61Aug 12, 2023Updated 3 years ago
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆883Jun 9, 2026Updated 4 months ago
- 该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用☆22Jun 22, 2022Updated 4 years ago
- 让fscan再次伟大☆371Sep 28, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆385Oct 29, 2025Updated 11 months ago
- VTI的PoC检测工具☆13Jul 30, 2024Updated 2 years ago
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆122Jul 30, 2025Updated last year
- 用于批量扫描远程桌面是否关闭NLA，而后半自动寻找搜狗输入法RCE。☆22Oct 10, 2024Updated 2 years ago
- (SP)^3: A Simple, Practical, and Safe Packet Spoofing Protocol☆17Mar 13, 2017Updated 9 years ago
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆122Jan 17, 2025Updated last year
- the metasploit script(POC) about CVE-2021-36260☆20Nov 3, 2021Updated 4 years ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆579Mar 10, 2025Updated last year
- ☆31Nov 1, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- icp备案查询☆407Sep 1, 2023Updated 3 years ago
- Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。☆400Jul 14, 2026Updated 2 months ago
- cve系列更新☆33Aug 28, 2026Updated last month
- FindSomething本地移植版--HeartK☆96Jul 15, 2025Updated last year
- 用友畅捷通T（TPlus） SQL注入批量POC QVD-2023-13612☆16Jun 28, 2023Updated 3 years ago
- 安全基线☆19Jul 23, 2021Updated 5 years ago
- HFS RCE 利用工具，支持HFS主流版本☆15Jun 13, 2024Updated 2 years ago